Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.user > #184252 > unrolled thread

Empty logs on VPS server

Back to article view | Back to linux.debian.user

Contents

  Empty logs on VPS server Hubert Hauser <hubot@mail.com> - 2017-07-26 02:10 +0200
    Re: Empty logs on VPS server Sven Hartge <sven@svenhartge.de> - 2017-07-26 10:00 +0200
      Re: Empty logs on VPS server Greg Wooledge <wooledg@eeg.ccf.org> - 2017-07-26 14:30 +0200

#184252 — Empty logs on VPS server

I wanted out of curiosity to see what is in /var/log/auth.log and I
seen empty file. All files in /var/log/ except files in /var/log/nginx
are empty.

I received following messages on IRC:

[13:43:10] <m4sk1n> what's with this ssh
[13:43:23] <m4sk1n> https://usercontent.irccloud-cdn.com/file/T1cmlueY/
FJIMG_20170722_134210.jpg
[13:43:44] <m4sk1n> what should i do with this
[13:45:04] <m4sk1n> and this is hubot whose bot and what he can
[19:54:13] <m4sk1n> well you're losing
[19:38:56] <hubot> I'd keep mystery about what's in /var/log :D
[19:40:25] <Rev> i know what do you have
[19:40:30] <hubot> What?
[19:40:34] <Rev> auth.log
[19:40:49] <hubot> And what's in auth.log?
[19:40:57] <Rev> hubot: i can't tell you
[19:41:05] <KrzaQ> probably dick

Can anyone help me?

[toc] | [next] | [standalone]

#184262

Hubert Hauser <hubot@mail.com> wrote:


> I wanted out of curiosity to see what is in /var/log/auth.log and I
> seen empty file. All files in /var/log/ except files in /var/log/nginx
> are empty.

Probably the template from your VPS provider lacks the package rsyslog,
cause the logs only to be available via journald.

Try "journalctl -f" to see if there is any activity there.

To get the default logs back, just install rsyslogd.

Grüße,
Sven.

-- 
Sigmentation fault. Core dumped.

[toc] | [prev] | [next] | [standalone]

#184266

On Wed, Jul 26, 2017 at 09:50:03AM +0200, Sven Hartge wrote:
> Hubert Hauser <hubot@mail.com> wrote:
> > I wanted out of curiosity to see what is in /var/log/auth.log and I
> > seen empty file. All files in /var/log/ except files in /var/log/nginx
> > are empty.
> 
> Probably the template from your VPS provider lacks the package rsyslog,
> cause the logs only to be available via journald.
> 
> Try "journalctl -f" to see if there is any activity there.
> 
> To get the default logs back, just install rsyslogd.

The actual package name is "rsyslog".

This issue (missing rsyslog) may also happen when upgrading to wheezy from
an older system (squeeze).  The rsyslog package was new and optional in
squeeze, and most systems still continued using the original syslogd+klogd
packages instead of replacing them with the new/experimental rsyslog
package.  Then, upon upgrading to wheezy, syslogd and klogd get removed,
but rsyslog does NOT get installed.

Had that happen to me on two systems, at which point I documented
it on the wiki under "Upgrade Issues"
<https://wiki.debian.org/NewInWheezy#Upgrade_issues>.

[toc] | [prev] | [standalone]

Back to top | Article view | linux.debian.user

csiph-web